🇩🇪
klaus_ph
2026-09-27 21:06:32
UTC ·
(1 month ago)
2026-09-26 22:59:21,418 fail2ban.actions [8144]: NOTICE [ipblocklist] Ban 34.19.57.29
...
Bad Web Bot
🇩🇪
klaus_ph
2026-09-26 10:01:03
UTC ·
(1 month ago)
2026-09-25 14:43:59,065 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.19.57.29
...
Bad Web Bot
🇮🇳
evicky2002
2026-09-23 06:00:01
UTC ·
(1 month ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇺🇸
Charlesiv
2026-09-22 22:01:07
UTC ·
(1 month ago)
Triggered Cloudflare WAF (linkMaze) from US.
Action taken: LINK_MAZE_INJECTED
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /_ignition/health-check
Timestamp: 2026-09-22T20:23:42Z
Ray ID: a3f40768ddfd7675
UA: Mozilla/5.0 (compatibl ...
show more
Triggered Cloudflare WAF (linkMaze) from US.
Action taken: LINK_MAZE_INJECTED
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /_ignition/health-check
Timestamp: 2026-09-22T20:23:42Z
Ray ID: a3f40768ddfd7675
UA: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
show less
Bad Web Bot
🇳🇱
oisecnet
2026-09-22 21:03:06
UTC ·
(1 month ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-09-22. 828 requests from this IP.
Port Scan
Hacking
Web App Attack
🇳🇴
Abuse Buster
2026-09-22 19:55:42
UTC ·
(1 month ago)
34.19.57.29 - [22/Sep/2026:21:55:39 +0200] "GET /.vite/manifest.json HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.19.57.29 - [22/Sep/2026:21:55:39 +0200] "G ...
show more
34.19.57.29 - [22/Sep/2026:21:55:39 +0200] "GET /.vite/manifest.json HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.19.57.29 - [22/Sep/2026:21:55:39 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.19.57.29 - [22/Sep/2026:21:55:40 +0200] "GET /oy48sqngewk9fuzl5tkj HTTP/2.0" 404 1862 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
...
show less
Web App Attack
🇩🇪
LRob
2026-09-22 19:53:58
UTC ·
(1 month ago)
This address swept through a list of pages that do not exist on our site within seconds — a scanner working through its wordlist of exploitable paths. Blocked; please check the machine behind it for a scanner or malware. | method: GET | path: /ewtnwm ...
show more
This address swept through a list of pages that do not exist on our site within seconds — a scanner working through its wordlist of exploitable paths. Blocked; please check the machine behind it for a scanner or malware. | method: GET | path: /ewtnwm7fyy4z0z4pureq (+7 more) | 2026-09-22 19:53 UTC
show less
Port Scan
Web App Attack
🇹🇭
thaizone.com
2026-09-22 19:42:14
UTC ·
(1 month ago)
Hacking attempts against websites (D1) #2
Web App Attack
Hacking
🇩🇪
pscriptos
2026-09-22 19:41:06
UTC ·
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics
Web App Attack
Bad Web Bot
🇫🇮
oh.mg
2026-09-22 17:30:23
UTC ·
(1 month ago)
[Tue Sep 22 19:30:23.421567 2026] [security2:error] [pid 2235361:tid 2235382] [client 34.19.57.29:0] [client 34.19.57.29] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/shar ...
show more
[Tue Sep 22 19:30:23.421567 2026] [security2:error] [pid 2235361:tid 2235382] [client 34.19.57.29:0] [client 34.19.57.29] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 40)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "hk.mmn.ca"] [uri "/"] [unique_id "arK7L3lXvCYinNMF_c__iwAAAFE"]
...
show less
Web App Attack
Bad Web Bot
🇺🇸
Charlesiv
2026-09-22 16:00:20
UTC ·
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /.ssh/known_hosts
Timestamp: 2026-09-22T14:56:17Z
Ray ID: a3f227ccef72f01b
UA: Mozilla/5.0 AppleWebKit/537.36 (KHT ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /.ssh/known_hosts
Timestamp: 2026-09-22T14:56:17Z
Ray ID: a3f227ccef72f01b
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-22 15:28:02
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.19.57.29 (29.57.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:27:56.599960 2026] [security2:error] [pid 27674:tid 2767 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.57.29 (29.57.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:27:56.599960 2026] [security2:error] [pid 27674:tid 27674] [client 34.19.57.29:59932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anthonyanimalclinic.net"] [uri "/static//home/user/.env"] [unique_id "arKefFkOmayfcrrhVflY6AAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-22 15:12:36
UTC ·
(1 month ago)
34.19.57.29 - - [22/Sep/2026:10:12:36 -0500] "GET /index.php?s=index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=env HTTP/2.0" 301 348 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.fa ...
show more
34.19.57.29 - - [22/Sep/2026:10:12:36 -0500] "GET /index.php?s=index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=env HTTP/2.0" 301 348 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.19.57.29 - - [22/Sep/2026:10:12:36 -0500] "GET /index.php?s=index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=file_get_contents&vars[1][]=.env HTTP/2.0" 301 360 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.19.57.29 - - [22/Sep/2026:10:12:36 -0500] "GET /index.php?s=index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=file_get_contents&vars[1][]=/proc/self/environ HTTP/2.0" 301 374 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
...
show less
Brute-Force
Web App Attack
🇺🇸
abenage
2026-09-22 15:11:42
UTC ·
(1 month ago)
34.19.57.29 - - [22/Sep/2026:09:11:41 -0600] "GET /account/login HTTP/2.0" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
Bad Web Bot
Web App Attack
🇮🇹
ciccio diddo
2026-09-22 15:08:05
UTC ·
(1 month ago)
High Burst multiple 40X port:Tcp/80,443
Brute-Force
Web App Attack